Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/brz2cAvcStvNZw1ifjXV0Z1fKdI.roa
File: brz2cAvcStvNZw1ifjXV0Z1fKdI.roa (raw, json)
Hash identifier: qR7KojeDDIaA8lbaPul64N6juy/D9YUta6b5Us90fGQ=
Subject key identifier: 6E:BC:F6:70:0B:DC:4A:DB:CD:67:0D:62:7E:35:D5:D1:9D:5F:29:D2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C642DB502E0980CF266C8072623A7EF03
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/brz2cAvcStvNZw1ifjXV0Z1fKdI.roa
Signing time: Wed 13 Dec 2023 17:16:06 +0000
ROA not before: Wed 13 Dec 2023 17:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:64:2d:b5:02:e0:98:0c:f2:66:c8:07:26:23:a7:ef:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 17:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ebcf6700bdc4adbcd670d627e35d5d19d5f29d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:c0:88:1a:6c:93:bf:f7:1b:4c:3a:03:b0:
a2:7b:f3:19:5c:47:c9:d1:c3:97:a5:59:d4:0e:e7:
40:0f:dd:68:9e:bb:15:db:e9:99:d7:11:4c:bf:33:
7f:30:b7:76:63:f6:3e:ec:de:f0:2d:42:fc:d4:72:
7d:ca:dc:b4:00:4e:00:f8:15:7e:a6:7b:ae:43:46:
99:c2:b8:80:8f:b9:a6:3e:4d:99:5f:b9:59:41:73:
4d:08:1a:f6:15:cd:5d:eb:02:3f:dc:7e:f4:74:29:
80:80:d4:9d:f4:d9:69:b4:26:eb:9c:4f:42:85:19:
10:76:1d:35:6c:12:d4:1b:7e:1a:34:f9:19:2b:4e:
93:aa:3d:87:01:b2:75:d5:18:48:aa:99:61:95:82:
c4:5d:6f:46:7f:2a:84:5b:8c:39:65:94:b6:65:f7:
c3:63:0c:04:c1:11:2b:67:2a:1e:35:e6:13:49:99:
53:64:09:60:0d:0f:28:58:34:57:ab:d6:55:3b:f3:
e8:ff:ac:22:87:e4:3d:ee:14:d6:00:2c:32:ef:0e:
93:c2:71:93:51:74:88:02:f5:30:fb:6b:90:4b:2f:
e3:57:61:05:23:0a:96:b1:6f:22:bf:3c:17:4c:4a:
7b:93:9f:5e:c0:f1:d4:60:05:93:d5:c2:16:37:f7:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BC:F6:70:0B:DC:4A:DB:CD:67:0D:62:7E:35:D5:D1:9D:5F:29:D2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/brz2cAvcStvNZw1ifjXV0Z1fKdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:1b:b7:94:38:3d:8b:41:88:a1:af:82:e5:3b:1a:c1:95:f7:
f1:7d:07:91:e8:ba:dd:e2:4f:ba:76:b3:59:67:d7:72:96:cc:
fb:c1:c7:e7:32:17:7f:1d:33:f3:e2:03:f8:39:f7:dc:5a:34:
dd:86:2d:ee:49:3d:b0:87:1c:50:02:75:74:81:9f:e8:38:27:
cf:b2:7b:71:49:6d:71:c6:2c:e0:a4:ea:9b:fc:ad:db:84:f0:
39:83:cd:aa:d5:b6:c2:31:2b:f9:38:eb:c9:36:1b:72:a5:d3:
32:01:d7:97:54:ad:51:ac:42:23:4d:fb:87:85:27:de:31:e9:
6d:ca:03:f2:26:7b:74:7b:c0:47:f0:d8:00:0d:cf:b0:4c:d4:
6f:ba:ea:fe:de:53:a2:f4:a6:ef:52:01:24:de:01:0d:91:2c:
41:47:ed:8a:e6:01:7e:51:cc:c7:58:f5:0b:f1:bc:33:1a:60:
ea:99:9a:b1:da:0e:17:56:18:13:84:eb:d7:eb:21:8a:65:ac:
82:57:05:3b:14:23:bc:99:a7:09:7f:8b:06:ae:ca:17:93:d1:
f2:94:11:0e:20:41:d8:9a:c6:c2:a9:19:07:b0:b9:53:85:eb:
61:12:50:73:13:44:f0:ff:85:2a:12:1f:6a:39:99:80:7a:60:
75:6c:10:90
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxkLbUC4JgM8mbIByYjp+8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjEzMTcxNjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWJjZjY3MDBiZGM0YWRiY2Q2NzBkNjI3ZTM1ZDVkMTlkNWYyOWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRnAiBpsk7/3G0w6A7Cie/MZXEfJ
0cOXpVnUDudAD91onrsV2+mZ1xFMvzN/MLd2Y/Y+7N7wLUL81HJ9yty0AE4A+BV+
pnuuQ0aZwriAj7mmPk2ZX7lZQXNNCBr2Fc1d6wI/3H70dCmAgNSd9NlptCbrnE9C
hRkQdh01bBLUG34aNPkZK06Tqj2HAbJ11RhIqplhlYLEXW9GfyqEW4w5ZZS2ZffD
YwwEwRErZyoeNeYTSZlTZAlgDQ8oWDRXq9ZVO/Po/6wih+Q97hTWACwy7w6TwnGT
UXSIAvUw+2uQSy/jV2EFIwqWsW8ivzwXTEp7k59ewPHUYAWT1cIWN/eGLwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG689nAL3ErbzWcNYn411dGdXynSMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvYnJ6MmNBdmNTdHZOWncxaWZqWFYwWjFmS2RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALAbt5Q4PYtBiKGvguU7
GsGV9/F9B5Hout3iT7p2s1ln13KWzPvBx+cyF38dM/PiA/g599xaNN2GLe5JPbCH
HFACdXSBn+g4J8+ye3FJbXHGLOCk6pv8rduE8DmDzarVtsIxK/k468k2G3Kl0zIB
15dUrVGsQiNN+4eFJ94x6W3KA/Ime3R7wEfw2AANz7BM1G+66v7eU6L0pu9SASTe
AQ2RLEFH7YrmAX5RzMdY9QvxvDMaYOqZmrHaDhdWGBOE69frIYplrIJXBTsUI7yZ
pwl/iwauyheT0fKUEQ4gQdiaxsKpGQewuVOF62ESUHMTRPD/hSoSH2o5mYB6YHVs
EJA=
-----END CERTIFICATE-----
Generated at Sun May 11 22:46:07 2025 by rpki-client